CVE-2026-105826

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted MATLAB MAT image containing highly compressed data. The MAT decoder fails to enforce configured temporary file size limits during decompression, allowing oversized temporary file...

CVE-2026-7393-RCE

Pizzafy Ecommerce System 1.0 – Upload di file senza restrizioni in savemenu consente l'esecuzione di codice in remoto Dettagli Campo| Valore ---|--- Fornitore| SourceCodester URL del fornitore| https://www.sourcecodester.com Prodotto| Pizzafy Ecommerce System con PHP e MySQL URL del prodotto|...

CVE-2026-98192

A flaw was found in the Linux kernel's wcn36xx Wi-Fi driver. This vulnerability can lead to a Denial of Service DoS or system instability due to a use-after-free condition. When deinitializing the transmission acknowledgement timer during device removal, the driver stops the timer without waiting...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Sistema-Assunzione-Infermiere-Online-v1.0-Vulnerabilità-SQL-Injection Autore dell'exploit: ugurkarakoc Homepage del fornitore https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link del software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826...

CVE-2023-27532-RCE-Only

Versione Forkata Solo RCE Repository forkato e rimossa la parte di leak delle credenziali. Applicate correzioni per la compilazione. CVE-2023-27532 Proof of Concept per sfruttare CVE-2023-27532 e ottenere credenziali in chiaro o eseguire comandi da remoto. Panoramica Per un'analisi dettagliata...

CVE-2025-68921

CVE-2025-68921 Una vulnerabilità di escalation locale dei privilegi è presente in Nahimic, un software di potenziamento audio preinstallato su molti laptop da gaming. Il problema consente a un utente con privilegi limitati di elevare i privilegi a NT AUTHORITY\SYSTEM . Questa vulnerabilità è stat...

CVE-2026-68006

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...

CVE-2026-107782

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-78399 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

CVE-2026-78399

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a Denial of Service (DoS) attack. An authenticated user can trigger the DoS by sending a specially crafted HTTP query , which leads to an improper allocation...

EUVD-2026-95272

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] Questa è una raccolta di file utilizzata per eseguire il fuzzing delle system call su OpenBSD amd64 usando TriforceAFL cioè AFL e QEMU. Per...

TriforceLinuxSyscallFuzzer

TriforceLinuxSyscallFuzzer 20160613 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] Novità: per chi vuole giocare con TriforceAFL e TLSF, Richard Johnson ha creato un Dockerfile che installa entrambi e compila persino un...

EternalBlue-Exploit-Demonstration

Dimostrazione dell'exploit EternalBlue MS17-010 Laboratorio di cybersecurity che dimostra lo sfruttamento di CVE-2017-0144 EternalBlue utilizzando Metasploit contro un sistema Windows 7 vulnerabile, ottenendo accesso a livello SYSTEM tramite Meterpreter. Questo progetto simula anche un attacco...

system_bt_AOSP_10_r33_CVE-2021-0316

Stack Bluetooth Fluoride Build ed esecuzione su AOSP Basta compilare AOSP - Fluoride è presente di default. Build ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e 16.10 con Clang 3.8.0 Scaricare il codice sorgente mkdir /fluoride cd /fluoride git clone...

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-

LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- La POC mostra come far fuoriuscire dati di postgresql tramite il sottosistema hugefile. Basata su https://x.com/spendergrsec/status/1993794163880718700?s=20...

EternalBlue-Exploit-Demonstration-MS17-010

Dimostrazione dell'Exploit EternalBlue MS17-010 Laboratorio di cybersecurity che dimostra lo sfruttamento della CVE-2017-0144 EternalBlue utilizzando Metasploit contro un sistema Windows 7 vulnerabile, ottenendo accesso a livello SYSTEM tramite Meterpreter. Questo progetto simula inoltre un attac...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...